Now, I am not saying that humans should count in base11 given that is the number of states you can do with binary unordered finger counting but ...

The more I think about it, the fact that every single stock image for cybersecurity includes a padlock & the fact that most padlocks are indeed shit ... we should have seen the signs.

CVE-2026-99999 is just a beautiful summary of this entire year as it comes to vulnerability management.

exception that proves the rule, good on you

Yall, I kinda had forgotten how it feels to not have to shit every hour or so. And you all live like that? Woah.

Touching grass is no longer enough, I need to eat it

At which point becomes bombing "AI" data centers self defense in the context of climate change?

fuck it, someone name a nice european city to visit in late october

So, most likely the "reserved" date in the CVE record is actually not reliable/correct? That... bothers me.

RE: https://infosec.exchange/@fuckeduprefs_bot/117451467118494691

...what the fuck happened here.

https://github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.md

The researchers post is over a year old & states CVE-2025-52097 was already assigned in July 2025. The references are from the researchers advisory, checking the wayback machine has nothing for this dead link. The CVE record states it was reserved in 2026.

(this is a fucking lie, I literally have a tiering model with separate hardware in my personal infrastructure & my own team at work was kinda afraid when I started poking at our own AAA systems)

privilege separation is for fallible humans, I am beyond that

https://www.beyondtrust.com/blog/entry/bt26-05 / https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust

woopsidaisy - 0-day/eitw arbitrary file upload vulnerability on the BeyondTrust RS appliances leading to code execution. Some IOCs in there but it's a bit thin. Attacker deleted logs so, honestly, probably best to check if y'all are missing some :3

Not all of them but two of the largest slop pushers

You'll never believe what former colleagues turn out to believe climate change is a hoax? Thats right, its the AI slob gobblers.

Shower thought: tool that blocklists every IP trying to complete a TCP handshake (as in: on the final ACK) against any port not in use

I should put tamper stickers on all my stuff

It would be very funny if something in the arch stack relicenses to an "anyone but dhh" license

(dont check my personal VPSs, nothing to see there, do as I say, not as I do!)

RE: https://infosec.exchange/@ifin/117441195129660511

taps a smaller sign this includes ssh

:neobot_floof_devil: